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Amendments to the Claims 
Please amend the claims of the present application as set forth below. In 
accordance with the PTO's revised amendment format, a detailed listing of all 
claims has been provided. A status identifier is provided for each claim in a 
parenthetical expression following each claim number. Changes to the claims are 
shown by strikethrough and double brackets (for deleted matter) or underlining 
(for added matter). 

1 . (original): A method comprising: 
generating a formal license for content that includes: 

a decryption key for decrypting the content; and 
access rules for accessing the content; and 
configuring a plurality of license authorities to provide a plurality of partial 
licenses, wherein: 

each said license authority provides a respective said partial license; and 
the plurality of partial licenses are combinable to form the fomial license. 

2. (original): A method as described in claim 1, wherein the plurality of 
partial licenses are provided according to a (^, m) threshold secret sharing scheme in 
which: 

a number k said partial licenses are combinable to form the formal license; 

and 

knowledge of any ^ - 1 or fewer said partial Hcenses may not be utilized 
to form information included in the formal license. 
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3. (original): A method as described in claim 1, wherein the configuring 
includes: 

generating a pre-license from the formal license by encrypting the formal license; 

dividing an encryption key into a plurality of partial secret shares, wherein the 
encryption key is for decrypting the pre-Ucense; and 

transmitting the pre-license and a respective said partial secret share to each said 
license authority such that each said Ucense authority is configured to generate the 
respective said partial license from the respective said partial secret share and the pre- 
Ucense. 

4. (original): A method as described in claim 3, wherein each said Ucense 
authority verifies the pre-license and the respective said partial secret share by utilizing a 
verifiable secret sharing (VSS) scheme. 

5. (currently amended): A method as described in claim 1, wherein the 
configuring includes: 

generating a pre-license from the formal license by encrypting the formal license 
utilizing an asymmetric encryption algorithm having a public key and a private key, 
wherein the formal license, the pre-Ucense and the public key are denoted, respectively, 
as ''license'\ ''prer and "P/T' as follows: 

prel = (license/^; 

dividing the private key SK into m partial secret shares according to a (k, m) 
threshold secret sharing scheme by: 
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generating a sharing polynomial f(x) ov e r any finit e field Z, wh e r e a^ — 
SK, th e sharing polynomial being represented as follows: 

f(x) -Qo^ ajx + . . . + Uk-i x^'^ , where a n = SK : and 
calculating each said partial secret share, denoted as 5,-, for a respective 
said Ucense authority, denoted by /V/„ in which / = 1, w, as follows: 

S i ~f(id^ Si=f{idi) mod(p{N), where is a RSA modulus 

and <i(N) is a Euler totient fimction : and 

transmitting the pre-license and a respective said partial secret share to a 
respective said Hcense authority, wherein each said license authority is configured to 
generate the respective said partial license fi-om the respective said partial secret share 
and the pre-license. 

6. (ciurently amended): A method as described in claim 5, wherein each said 
license authority verifies the pre-license and the respective said partial secret share by 
utilizing a verifiable secret sharing (VSS) scheme in which k public witnesses of the 

sharing polynomial's f(x) coefficients (denoted as© 9*'ig /, wher e - gcZ g€Z^) 

are communicated to each said license authority idi to verify vaUdity of a respective said 
partial secret share iS/by determining if the following equation holds: 

g^'=g°°(g"')"----(g°"-f'"'modN 

7. (original): A method as described in claim 1, further comprising 
packaging the content to include one or more network addresses that are suitable for 
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locating each said license authority. 

8. (original): A method as described in claim 1, wherein each said license 
authority is communicatively coupled to a peer-to-peer network. 

9. (original): A method as described in claim 1, wherein the pluraHty of 
license authorities are configured based on a consideration such that at least one said 
license authority provides two or more said partial licenses, wherein the consideration is 
selected from the group consisting of: 

security of the at least one said license authority against unauthorized access; 

load sharing of the plurality of license authorities; 

availability of each said Hcense authority; 

network availability of each said license authority; 

hardware resources of each said license authority; 

software resources of each said license authority; and 

any combination thereof. 

10. (original): A method as described in claim 1, wherein the configuring 
includes transmitting the plurality of partial licenses to the plurality of license authorities 
such that each said license authority stores the respective said partial license. 

11. (original): One or more computer-readable media comprising computer- 
executable instructions that, when executed, perform the method as recited in claim 1. 
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12. (original): A computer-readable medium comprising computer executable 
instructions that, when executed by a computer, direct the computer to: 

configure a plurality of license authorities to provide a plurality of partial licenses, 
wherein: 

each said license authority provides a respective said partial license; 
each said license authority has a network address; 

the plurality of partial license are combinable to form a formal license; and 
the formal license provides access to content; and 
package the content to include one or more network addresses that are suitable for 
locating each said license authority. 

13. (original): A computer-readable medium as described in claim 12, wherein 
the one or more network addresses include one or more proxy addresses for locating a 
network address of each said license authority. 

14. (original): A computer-readable medium as described in claim 12, wherein 
the one or more network addresses include a network address of each said license 
authority. 

15. (original): A computer-readable medium as described in claim 12, wherein 
the plurality of Ucense authorities are configured to provide the plurality of partial 
licenses according to a (/r, m) threshold secret sharing scheme in which: 

a number k said partial licenses are combinable to form the formal license; 

and 
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knowledge of any ^ - 1 or fewer said partial licenses may not be utilized 
to form information included in the formal license. 

16. (original): A computer-readable medium as described in claim 12, wherein 
the computer executable instructions when executed by the computer direct the computer 
to configure a plurality of license authorities by: 

generating a pre-license firom the formal license by encrypting the formal license; 

dividing an encryption key into a plurality of partial secret shares, wherein the 
encryption key is for decrypting the pre-license; and 

transmitting the pre-license and a respective said partial secret share to each said 
license authority such that each said license authority is configured to generate the 
respective said partial license firom the respective said partial secret share and the pre- 
license. 

17. (original): A computer-readable medium as described in claim 16, wherein 
each said license authority verifies the pre-license and the respective said partial secret 
share by utilizing a verifiable secret sharing (VSS) scheme. 

18. (original): A computer-readable medium as described in claim 12, wherein 
the computer executable instructions, when executed by the computer, direct the 
computer to configure the plurality of license authorities by transmitting the plurality of 
partial licenses to the plurality of license authorities such that each said license authority 
stores the respective said partial license. 
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19. (original): A computer-readable medium comprising computer executable 
instructions that, when executed by a computer, direct the computer to: 
encrypt content; 

generate a formal license for the encrypted content that includes access rules and 
a decryption key for decrypting the encrypted content; 

encrypt the formal license to generate a pre-license; 

divide an encryption key suitable for decrypting the pre-Hcense into a plurality of 
partial secret shares; 

upload the pre-license and the plurality of partial secret shares to a plurality of 
Hcense authorities such that each said license authority receives a respective said partial 
secret share and the pre-license; 

package the encrypted content to include one or more network addresses that are 
suitable for locating each said license authority; and 

distribute the packaged content. 



20. (original): A computer-readable medium as described in claim 19, wherein 
the plurality of license authorities are configured to provide the plurality of partial 
licenses according to a {k, m) threshold secret sharing scheme in which: 

a number k said partial licenses are combinable to form the formal license; 

and 

knowledge of any ^ - 1 or fewer said partial licenses may not be utilized 
to form information included in the formal license. 



21. (original): A computer-readable medium as described in claim 19, wherein 
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each said license authority verifies the pre-license and the respective said partial secret 
share by utilizing a verifiable secret sharing (VSS) scheme. 

22. (original): A method comprising: 

obtaining a plurality of partial licenses over a network fi-om a plurality of license 
authorities, wherein each said partial license is provided, respectively, by a different said 
license authority; and 

forming a formal license fi-om the plurality of partial licenses, wherein the formal 
license includes access rules and a decryption key for accessing content. 

23. (original): A method as described in claim 22, wherein the obtaining 
includes: 

examining the content to find a plurality of network addresses of a plurality of 
license authorities; 

requesting the plurality of partial licenses fi-om the plurality of license authorities; 

and 

receiving one or more communications having one or more said partial licenses 
that are provided by each said license authority. 

24. (original): A method as described in claim 22, wherein the forming 
includes combining the plurality of partial Hcenses to form the formal license. 

25. (original): A method as described in claim 22, wherein the plurality of 
partial licenses are provided according to a (k, m) threshold secret sharing scheme in 



Lee A haVes. FLLc 



12 



c| 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



which: 



a number k said partial hcenses are combinable to form the formal license; 

and 

knowledge of any ^ - 1 or fewer said partial licenses may not be utilized 
to form information included in the formal license. 

26. (original): A method as described in claim 25, further comprising 
determining if ^ correct partial licenses have been received. 

27. (currently amended): A method as described in claim 22, wherein: 

the plurality of partial licenses are obtained from the plurality of license 
authorities ov e r a finit e fi e ld Z by: 

calculating the partial license preU by each said license authority idi from a 
partial secret share 5, and a pre-license prel according to the following equation: 

prel^ = {prelY' modM 
generating a random number u to calculate ^/ = g", = pret, r = u-c'^ 

Si, and 

c = hash (g^' , prelf ^A^^A^)', and 

communicating the partial license preU, Aj, A2^ and r by each said license 
authority; and 

the formal license is formed from the plurality of partial licenses by: 

determining if k correct partial licenses have been received by validating 
each said partial license preli by: 
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calculating 



from public witnesses of a sharing polynomiars coefficients, 

which are denoted asiS ^"iS /, that was utilized to generate the partial 
secret share iS,-, where gcZ g e , 

applying c = hash (g^' ^prel^^A^^A^) to calculate c; and 

checking if g'' • {g^' Y = /I, and preF • (prel^Y = ^2 hold for each 

said partial Ucense prelim and if so, each said partial license preli is valid; 
and 

combining the plurality of partial licenses to form the formal license, 
denoted as license, when k valid said partial Hcenses are obtained, in which: 

license=^Yl(P^^O =(prel) ' 



i 

= (prel)''' = mcens^''^f^ mod N. 



where/^^.(x)= ][][ - 



28. (original): One or more computer-readable media comprising computer- 
executable instructions that, when executed, perform the method as recited in claim 22. 

29. (original): A computer-readable medium comprising computer executable 
instructions that, when executed by a computer, direct the computer to: 

examine packaged content to find a plurality of network addresses of a plurality 
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of license authorities; 

request a plurality of partial licenses from the plurality of license authorities; 

receive the plurality of partial licenses from the plurality of license authorities, 
wherein each said license authority provides at least one said partial license; 

combine the plurality of partial licenses to form a formal license, wherein the 
formal license includes access rules and a decryption key for decrypting the packaged 
content; and 

output the content by decrypting the packaged content utilizing the encryption key 
and checking the access rules of the formal license. 

30. (original): A computer-readable medium as described in claim 29, 
wherein the plurality of partial licenses are provided according to a {k, m) threshold secret 
sharing scheme in which: 

a number k said partial licenses are combinable to form the formal license; 

and 

knowledge of any A: - 1 or fewer said partial licenses may not be utilized 
to form information included in the formal license. 

3 1 . (original): A method comprising: 

configuring a plurality of license authorities in a first arrangement to provide a 
plurality of partial Ucenses, wherein: 

each said license authority provides at least one said partial license; and 
the plurality of partial licenses are combinable to form a formal license 

that includes access rules and a decryption key for content; and 
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updating the first arrangement to form a second arrangement such that: 

each said Ucense authority in the second arrangement provides at least one 
of a plurality of updated partial licenses that are combinable to form the formal 
license; and 

the partial licenses provided in the first arrangement are not combinable 
with the updated partial licenses to form the formal license. 

32. (original): A method as described in claim 31, wherein the updating is 
performed periodically. 

33. (currently amended): A method as described in claim 31, wherein the 
updating is performed over a finit e fi e ld Z by: 

generating a random (k, m) sharing by each license authority i using a random 
update polynomial yj, updatefx), wherein: 

distributing a subshare Sij by each said license authority / such that each said 
license authority / has a respective said subshare Sij from another said license authority 
wherein: 

the subshare S^ j = / ^^^^^ U)y J = is calculated by each said license 

authority /; 

the subshare Sij is added to the original share 5, of each said license 
authority to fomi a new updated share 



LEE & HAVES^ PUX 



16 



t 

1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



>i 

a new secret sharing polynomial fnewM is formed which is a summation of 
an original polynomial f(x) utilized to generate the plurality of partial licenses in 
the first arrange and each of the randomly generated ^o\ynom\d\s fi update(x)^ 

34. (original): A content publisher comprising: 
a processor; and 

memory configured to maintain: 

a formal license that includes access rules and a decryption key for 
content; and 

a license module that is executable on the processor to form one or more 
transmissions that include data for configuring a plurahty of license authorities 
such that: 

each said license authority provides one of a plurality of partial 
licenses; and 

the plurality of partial licenses are combinable to form the formal 

license. 

35. (original): A content publisher as described in claim 34, wherein the 
plurality of license authorities are configured to provide the plurality of partial licenses 
according to a {k, m) threshold secret sharing scheme in which: 

a number k said partial licenses are combinable to form the formal license; 

and 
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knowledge of any k - I or fewer said partial licenses may not be utilized 
to form information included in the formal license. 

36. (original): A content publisher as described in claim 34, wherein: 
the configuring includes: 

generating a pre-license firom the formal license by encrypting the formal 
license; and 

dividing an encryption key into a plurality of partial secret shares, wherein 
the encryption key is for decrypting the pre-license; and 

the one or more transmissions include the pre-hcense and the plurality of partial 
secret shares such that each said license authority is configured to generate a respective 
said partial license fi"om a respective said partial secret share and the pre-license. 

37. (original): A content pubUsher as described in claim 34, wherein the 
configuring includes transmitting the pluraHty of partial licenses to the plurality of license 
authorities such that each said license authority stores the respective said partial license. 

38. (original): A digital rights management system comprising a peer-to-peer 
network having a plurality of nodes, wherein: 

one said node includes a license module that is executable to form one or more 
transmissions, wherein each said transmission includes a pre-license and a partial secret 
share of an encryption key utilized to encrypt the pre-license; 

at least two said nodes are each configured to generate a respective one of a 
plurality of partial licenses fi-om a respective said partial secret share and the pre-license 
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that is received from a respective said transmission; and 

a number k of the partial licenses are combinable to form a formal Hcense that 
includes an encryption key and access rules for accessing content. 

39. (original): A digital rights management system as described in claim 38, 
wherein one or more said nodes provide the content. 

40. (original): A digital rights management system as described in claim 38, 
wherein knowledge of any A: - 1 or fewer of the partial licenses may not be utilized to 
form information included in the formal license. 

41. (original): A digital rights management system comprising a peer-to-peer 
network having a plurahty of nodes, wherein: 

at least two said nodes are each configured to provide at least one of a plurality of 
partial licenses; and 

one said node includes: 

a digital rights management module for forming a formal license from the 
plurality of partial licenses, wherein the formal license includes access rules and a 
decryption key for decrypting encrypted content; and 

a content player for outputting content that is accessed utilizing the formal 

license. 

42. (original): A digital rights management system as described in claim 41, 
wherein the plurality of partial licenses are provided according to a {k, rri) threshold secret 
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sharing scheme in which: 

a number k said partial licenses are combinable to form the formal license; 

and 

knowledge of any A: - 1 or fewer said partial licenses may not be utilized 
to form information included in the formal license. 

43. (original): A client device comprising: 
a processor; and 

memory configured to maintain: 

packaged content that includes one or more network addresses that are 
suitable for locating a plurality of license authorities, wherein each said license 
authority stores one or more partial licenses; 

a content player that is executable on the processor to output content; and 

a digital rights management module that is executable on the processor to: 
obtain the partial licenses from the plurality of license authorities 

utilizing the one or more network addresses; and 

form a formal license fi-om the obtained partial licenses, wherein 

the formal license provides access to the packaged content for output by 

the content player. 

44. (original): A client device as described in claim 43, wherein the digital 
rights management module that is executable on the processor to obtain the partial 
licenses by: 

examining the packaged content to find the one or more network addresses of the 



LEE & Haves, pllc 



20 



1 

2 
3 
4 

5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 



plurality of license authorities; 

requesting one or more said partial licenses from each said license authority; and 
receiving one or more commimications having the one or more partial licenses 

that are provided by each said license authority. 

45. (original): A client device as described in claim 43, wherein the plurality 
of partial licenses are provided according to a {k, m) threshold secret sharing scheme in 
which: 

a number k said partial licenses are combinable to form the formal license; 

and 

knowledge of any A: - 1 or fewer said partial licenses may not be utilized 
to form information included in the formal Ucense. 

46. (original): A client device as described in claim 43, wherein the one or 
more network addresses include a proxy address for locating a network address of each 
said license authority. 

47. (original): A client device as described in claim 43, wherein the one or 
more network addresses include a network address of each said license authority. 

48. (currently amended): A client device as described in claim 43, wherein the 
digital rights management module that is executable on the processor to: 

obtain the partial licenses from the plurality of license authorities, wherein each 
said license authority provide a respective said partial license ov e r a finit e fi e ld Z by: 
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calculating the partial license preli by each said license authority idi fronn a 
partial secret share 5, and a pre-license prel according to the following equation: 

prel^ = ( prelY' mod N : 
generating a random number u to calculate = g", A2 = pref, r = u-c* 

Siy and 

c = hash (g^' , prel- , yi, , ^2 ) j 
communicating the partial license preli, Au A2, and r by each said license 
authority; and 

the formal license is formed from the plurality of partial licenses by: 

determining if k correct partial licenses have been received by validating 
each said partial license preli by: 
calculating 

from public witnesses of a sharing polynomiaFs coefficients, 

which are denoted as , that was utilized to generate the partial 

secret share Si, where gcZ g e Z*^ , 

applying c = hash (g^' ,prel^ ,A^,A^) to calculate c; and 

checking if g' -{g^'Y - A^ and prel' {prel^Y = A^ hold for each 

said partial license preU^ and if so, each said partial license preU is valid; 
and 

combining the plurality of partial licenses to form the formal license, 
denoted as license^ when k valid said partial licenses are obtained, in which: 
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T-r / (0) I.Srh.,iO) 

license=Yl(P^eO^^ =(prel) * 



* x-id; 
where /^^(x)= fl tt"^" 
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